Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft
File: deEJHTju5ZeWM68nco7pUjGv9tM.mft (raw, json)
Hash identifier: Vkoq5XD+U7B+fkP9Arz7yeIv3BZy91CqDFMQPgBQlfE=
Subject key identifier: 55:44:6F:02:D2:BA:D6:AF:C9:20:FF:C6:59:5C:8B:37:5C:E6:4E:C1
Authority key identifier: 75:E1:09:1D:38:EE:E5:97:96:33:AF:27:72:8E:E9:52:31:AF:F6:D3
Certificate issuer: /CN=75e1091d38eee5979633af27728ee95231aff6d3
Certificate serial: 0199FB7C814C0EFEA054AD8B0ABB8F6EADEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deEJHTju5ZeWM68nco7pUjGv9tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft
Manifest number: 04A7
Signing time: Sun 19 Oct 2025 08:01:04 +0000
Manifest this update: Sun 19 Oct 2025 08:01:04 +0000
Manifest next update: Mon 20 Oct 2025 08:01:04 +0000
Files and hashes: 1: deEJHTju5ZeWM68nco7pUjGv9tM.crl (hash: yQVbRhOn+lJuMOIJuN8Wfh0jsivhELN4/862PWrdL+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/deEJHTju5ZeWM68nco7pUjGv9tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:81:4c:0e:fe:a0:54:ad:8b:0a:bb:8f:6e:ad:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e1091d38eee5979633af27728ee95231aff6d3
Validity
Not Before: Oct 19 08:01:04 2025 GMT
Not After : Oct 20 08:01:04 2025 GMT
Subject: CN=55446f02d2bad6afc920ffc6595c8b375ce64ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:21:9e:3a:cd:24:8b:82:ad:06:d2:aa:3f:
65:3a:b0:13:ae:29:a8:a9:bf:dc:93:8f:6b:51:52:
c1:53:0c:b3:ba:78:dd:c7:37:f4:3a:a8:d3:f6:52:
5f:94:86:6d:2c:f6:a7:23:d9:16:88:8d:32:42:12:
39:e2:b6:6b:67:27:b0:f6:ee:9b:8c:33:5a:50:87:
60:68:9b:98:02:e5:f4:98:cf:b9:ba:f8:93:05:27:
0e:4e:24:63:08:c0:70:8d:5a:ea:4c:68:47:fa:71:
a0:36:fc:af:bf:7e:e5:fd:19:30:41:73:9a:d5:e8:
f7:18:7f:3f:f6:04:5b:aa:94:58:68:67:74:d8:53:
3b:3a:a6:70:14:79:c7:59:45:4b:f7:20:ee:fd:fb:
7f:22:96:b3:5e:74:e4:d0:8a:7a:2f:2f:a6:a5:9c:
e8:dd:b3:33:45:1d:f9:56:f3:e2:2f:fa:17:ac:8b:
6b:b9:27:cb:60:23:a5:90:d5:2f:dc:68:c0:07:8a:
30:63:3c:66:fb:05:24:03:f4:ea:96:4c:71:60:2f:
aa:1f:11:68:c0:63:8d:18:df:e1:18:fb:4b:49:10:
e6:f8:2b:8e:28:98:c2:5e:8e:27:0d:4a:e2:e5:29:
91:f1:25:6a:e8:21:ab:24:0f:db:4f:9d:5b:32:1b:
74:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:44:6F:02:D2:BA:D6:AF:C9:20:FF:C6:59:5C:8B:37:5C:E6:4E:C1
X509v3 Authority Key Identifier:
keyid:75:E1:09:1D:38:EE:E5:97:96:33:AF:27:72:8E:E9:52:31:AF:F6:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deEJHTju5ZeWM68nco7pUjGv9tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:77:b9:07:bf:ca:a0:e1:c1:89:3d:8d:21:d1:b6:48:d2:a7:
40:6f:f3:4c:17:98:75:d9:77:95:8d:0c:fd:65:9a:76:28:93:
85:13:57:3b:2f:db:8c:f7:07:4c:d2:bf:a0:7a:be:77:27:ca:
e4:cd:8b:9b:e3:89:68:c1:db:48:f6:7d:bd:70:1d:75:72:63:
28:a5:a7:2a:1c:77:e5:7e:ce:e6:1d:e5:7e:53:c9:ac:b3:53:
d2:2e:33:da:46:17:1e:b6:16:ae:be:77:5c:c0:72:64:e8:09:
77:11:d0:53:d3:e2:4c:a2:9d:b6:18:69:1e:9e:53:82:87:2b:
70:14:a7:75:ca:d9:89:bb:12:e0:7f:5b:60:23:34:21:d1:e3:
f9:d1:c1:8e:8b:4d:24:af:82:33:49:f0:ee:79:f0:67:8a:dd:
73:3b:8a:f9:e0:25:ac:93:5a:fd:c2:d5:7b:d2:84:eb:9d:64:
48:53:d9:46:3b:f4:e0:61:56:03:a9:2c:ba:e7:66:fa:6d:35:
d3:b2:f7:99:ca:87:94:a0:17:ba:95:7c:b0:92:44:9f:6a:7b:
49:9f:2a:a1:ec:b8:fa:0e:db:85:ee:a8:f7:c2:33:60:77:61:
37:a2:4b:78:01:5e:a1:d6:4d:a0:f5:dd:41:d4:ff:ef:f9:76:
cb:ef:0c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:16 2025 by rpki-client